This advisory concerns the satellite/foreman-mcp-server-rhel9 container image provided by Red Hat Satellite as a Technology Preview. The MCP server facilitates advanced reporting and AI-based data analysis. Two vulnerabilities, CVE-2026-9073 and CVE-2026-12112, are associated with this component. The advisory does not specify technical details of the vulnerabilities beyond referencing CWEs 532 (Information Exposure) and 287 (Improper Authentication). No official fixes or patches are currently available, and the container image is newly introduced as a preview. The advisory directs users to Red Hat Satellite documentation for MCP integration but does not provide remediation steps.

The vulnerabilities are classified as high severity and involve potential information exposure and authentication issues as indicated by the referenced CWEs. However, no known exploits are reported in the wild at this time. The impact could affect confidentiality and authentication integrity within the MCP server component of Red Hat Satellite, potentially compromising reporting and data analysis functions.

No official fixes or patches are currently available for these vulnerabilities as per the Red Hat advisory. Users should monitor Red Hat's official channels for updates and apply any future patches promptly. Since this is a Technology Preview container image, cautious deployment and limiting exposure of the MCP server until a stable, patched release is available is advisable. Refer to Red Hat Satellite documentation for guidance on MCP integration and best practices.